diff options
| author | Ole-Martin Bratteng <1681525+omBratteng@users.noreply.github.com> | 2020-08-21 18:23:24 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-08-21 10:23:24 -0600 |
| commit | c73ab5665469a28dec2995b2b15d3462b0a83c4b (patch) | |
| tree | 6c357c5ff7678f0c366dd34a760a521355f10abc /cloudinit/config/cc_ssh_authkey_fingerprints.py | |
| parent | 747723a42c98fa13080ea31127e289e7b826046f (diff) | |
| download | vyos-cloud-init-c73ab5665469a28dec2995b2b15d3462b0a83c4b.tar.gz vyos-cloud-init-c73ab5665469a28dec2995b2b15d3462b0a83c4b.zip | |
Update the list of valid ssh keys. (#487)
Update ssh_util.py with latest list of keys (from openssh-8.3p1/sshkey.c),
Added keys:
sk-ecdsa-sha2-nistp256-cert-v01@openssh.com
sk-ecdsa-sha2-nistp256@openssh.com
sk-ssh-ed25519-cert-v01@openssh.com
sk-ssh-ed25519@openssh.com
ssh-xmss-cert-v01@openssh.com
ssh-xmss@openssh.com
LP: #1877869
Diffstat (limited to 'cloudinit/config/cc_ssh_authkey_fingerprints.py')
| -rwxr-xr-x | cloudinit/config/cc_ssh_authkey_fingerprints.py | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/cloudinit/config/cc_ssh_authkey_fingerprints.py b/cloudinit/config/cc_ssh_authkey_fingerprints.py index 7ac1c8cf..05d30ad1 100755 --- a/cloudinit/config/cc_ssh_authkey_fingerprints.py +++ b/cloudinit/config/cc_ssh_authkey_fingerprints.py @@ -13,7 +13,7 @@ Write fingerprints of authorized keys for each user to log. This is enabled by default, but can be disabled using ``no_ssh_fingerprints``. The hash type for the keys can be specified, but defaults to ``sha256``. -**Internal name:** `` cc_ssh_authkey_fingerprints`` +**Internal name:** ``cc_ssh_authkey_fingerprints`` **Module frequency:** per instance @@ -59,8 +59,8 @@ def _gen_fingerprint(b64_text, hash_meth='sha256'): def _is_printable_key(entry): if any([entry.keytype, entry.base64, entry.comment, entry.options]): - if (entry.keytype and - entry.keytype.lower().strip() in ['ssh-dss', 'ssh-rsa']): + if (entry.keytype and entry.keytype.lower().strip() + in ssh_util.VALID_KEY_TYPES): return True return False |